Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 05:54
Behavioral task
behavioral1
Sample
a414696b67478adfb8b13e6f53edf43f_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a414696b67478adfb8b13e6f53edf43f_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
a414696b67478adfb8b13e6f53edf43f_JaffaCakes118.pdf
-
Size
36KB
-
MD5
a414696b67478adfb8b13e6f53edf43f
-
SHA1
77a4a7a194a37f5950d9f660edd4afc4d2456f9c
-
SHA256
b7154f6bda27c0bb3d236abb3524a4f8d0d75520cda69cbb8007044b1c32026b
-
SHA512
95d3c415a6778f8c8223280fae7109efbebe560ff2071574e82396f43a8f65db56505692a35989004fdbef9a5a8d33e915b8fbeaf174417c4b673acabf5d976b
-
SSDEEP
768:ZuXoIjr1eP0PqV5GRmuatfYsmtrasUSH0qfdE5kXuMZmwgCLWar2E:Zu4CRPqV5GRmuapYsmtHNfnXFZmGWS2E
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1560 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1560 AcroRd32.exe 1560 AcroRd32.exe 1560 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a414696b67478adfb8b13e6f53edf43f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1560
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e15a1a22bcb0027d77674c1c8f6657be
SHA13079d981fc2e42d4151c195a359cd2e3225792b6
SHA256a8f946e941fde73c3f1c9be7ddc6e5762da17595dd0e25476ad99e0384155394
SHA5124c5c79b70e11d88e51a358e0eb0b7729228e4382deeef1575f89e3bbc8b55fe9b5f36f117cd57dbce89b1fd06615d5d4e9ae50875256434e4a89aa4ad22b363d